Hacker News Reader

It is also of interest because at least ~$1m of funds were stolen from thousands of wallets made by people that wanted a simple and seemingly reputable CLI tool to generate a mnemonic and derive addresses for various coins.

Sigh. I did not know that, thanks :(

Now I'm busy making my own CLI for that, after this mess.

It's far from the first time that people have sought to make themselves extra secure and as a result found themselves using obscure software which was inadequately reviewed and flawed or even outright backdoored and as a result received almost no security at all.

there are a couple crypto programming youtube videos like that, remix IDE put up a warning at one point

its an interesting attack vector

provide educational resources with compromised examples

wait for dev or their users to deposit funds in the copy and pasted contract or dependency

long game, been wondering how well that worked